$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626.cer File: fb3f9cae-c3ca-43a8-b103-4f2e03730626.cer (raw, json) Hash identifier: JqHJKLCZU5llYTv9JOmQASj8ysGfyjfxM0+O00IFQtc= Subject key identifier: E2:78:AB:85:FC:AE:54:2E:B1:AF:F2:8B:02:5E:E7:E9:D5:53:FF:AA Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584270C14DC28AABFCFC4610C580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/fb3f9cae-c3ca-43a8-b103-4f2e03730626.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Jul 2023 00:45:16 +0000 Certificate not after: Tue 07 Oct 2025 00:45:16 +0000 Subordinate resources: IP: 45.95.209.0/24 IP: 141.193.71.0/24 IP: 203.57.88.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:70:c1:4d:c2:8a:ab:fc:fc:46:10:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 5 00:45:16 2023 GMT Not After : Oct 7 00:45:16 2025 GMT Subject: CN=fb3f9cae-c3ca-43a8-b103-4f2e03730626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d7:e5:91:bd:4e:e1:68:3b:dc:52:66:73:6a: d9:ae:e6:77:cd:c8:17:ed:92:ae:43:f4:02:5f:a9: fd:72:03:a1:e4:a3:86:ed:21:a4:09:90:5c:78:66: 6e:1a:e5:38:c9:1a:99:cf:e3:ac:5f:9f:fe:9e:60: 28:8c:ea:1c:f9:19:aa:78:26:bc:65:a2:1e:42:d7: 24:15:b6:49:b1:71:42:4a:c4:51:19:51:e3:b1:26: ef:eb:ab:a5:a6:50:66:5c:cb:29:9d:1b:87:3a:f5: be:25:d9:ae:fe:65:ca:68:e2:96:f4:fa:e4:8b:8a: 26:7f:52:e5:93:09:24:4c:db:ac:f2:26:fa:44:d7: 4f:c2:6c:c4:ba:de:7d:4a:0f:ab:b4:14:fa:b2:ed: 43:b8:d7:19:a4:ff:b2:8a:a8:17:d8:4f:04:9f:02: c5:80:6e:27:bd:c8:b6:1b:a9:67:da:54:93:26:e3: ac:cc:1e:23:18:73:8f:41:64:89:33:40:a6:5c:bb: 27:e2:52:dd:81:5f:3e:4e:d7:fb:0e:bf:82:ab:16: 74:9f:e8:7b:54:20:49:7e:be:6c:5f:ef:29:6c:25: f9:d9:bc:f3:a2:ae:3e:95:a2:34:b2:e8:5e:f5:f3: d5:2c:3c:93:89:ab:cf:59:c1:42:b3:d1:9d:24:94: 10:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:78:AB:85:FC:AE:54:2E:B1:AF:F2:8B:02:5E:E7:E9:D5:53:FF:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/fb3f9cae-c3ca-43a8-b103-4f2e03730626.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 45.95.209.0/24 141.193.71.0/24 203.57.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b8:75:81:5d:b1:64:08:a8:7c:68:67:5e:fc:ba:12:5f:13: 81:d9:f2:69:8c:3c:dc:ab:23:27:ad:82:e3:a9:1f:bf:c7:34: 41:64:8b:43:e2:7f:b6:85:d9:55:fb:fb:ba:43:d3:27:87:3d: e6:50:eb:fb:43:5e:fd:3c:db:36:15:cb:71:76:b3:2e:40:60: 54:18:9f:c0:f1:fc:63:2d:38:e4:db:dd:ec:8f:d2:b1:34:66: 45:d3:20:58:3b:8e:fc:84:d5:34:6d:b7:df:29:0d:f0:6d:be: 2d:c7:68:15:d2:03:23:87:c4:c4:18:db:8a:92:c1:5e:d6:42: ec:1f:bf:8b:28:61:bd:2b:c1:3d:37:f4:4f:3a:25:46:54:20: 1c:ea:9e:4a:eb:9a:d4:3d:3d:33:14:d0:20:76:95:5e:21:44: 5f:ad:00:e3:82:10:ca:09:7f:54:ba:77:d4:3a:a5:4e:13:4b: 43:44:e4:e0:14:63:68:6e:a4:f3:02:e8:48:3d:3f:fa:da:a4: 3e:88:f0:d4:83:ba:ad:b4:f3:ca:71:78:11:2b:c3:c4:87:20: b1:3c:41:41:44:09:8c:4e:f9:e2:1a:49:ad:c3:8b:e8:cf:48: de:ae:fb:cc:87:b7:71:fa:9a:3b:0e:81:16:a5:cb:dd:e9:52: 76:22:b2:f9 -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEJwwU3Ciqv8/EYQxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDcwNTAwNDUxNloXDTI1MTAwNzAwNDUxNlowLzEtMCsGA1UEAxMk ZmIzZjljYWUtYzNjYS00M2E4LWIxMDMtNGYyZTAzNzMwNjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Nflkb1O4Wg73FJmc2rZruZ3zcgX7ZKuQ/QC X6n9cgOh5KOG7SGkCZBceGZuGuU4yRqZz+OsX5/+nmAojOoc+RmqeCa8ZaIeQtck FbZJsXFCSsRRGVHjsSbv66ulplBmXMspnRuHOvW+Jdmu/mXKaOKW9Prki4omf1Ll kwkkTNus8ib6RNdPwmzEut59Sg+rtBT6su1DuNcZpP+yiqgX2E8EnwLFgG4nvci2 G6ln2lSTJuOszB4jGHOPQWSJM0CmXLsn4lLdgV8+Ttf7Dr+CqxZ0n+h7VCBJfr5s X+8pbCX52bzzoq4+laI0suhe9fPVLDyTiavPWcFCs9GdJJQQyQIDAQABo4IECzCC BAcwHQYDVR0OBBYEFOJ4q4X8rlQusa/yiwJe5+nVU/+qMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m YjNmOWNhZS1jM2NhLTQzYTgtYjEwMy00ZjJlMDM3MzA2MjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ZiM2Y5Y2FlLWMzY2EtNDNhOC1i MTAzLTRmMmUwMzczMDYyNi9mYjNmOWNhZS1jM2NhLTQzYTgtYjEwMy00ZjJlMDM3 MzA2MjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAAtX9EDBACNwUcDBADLOVgwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYLh1 gV2xZAiofGhnXvy6El8TgdnyaYw83KsjJ62C46kfv8c0QWSLQ+J/toXZVfv7ukPT J4c95lDr+0Ne/TzbNhXLcXazLkBgVBifwPH8Yy045Nvd7I/SsTRmRdMgWDuO/ITV NG233ykN8G2+LcdoFdIDI4fExBjbipLBXtZC7B+/iyhhvSvBPTf0TzolRlQgHOqe Suua1D09MxTQIHaVXiFEX60A44IQygl/VLp31DqlThNLQ0Tk4BRjaG6k8wLoSD0/ +tqkPojw1IO6rbTzynF4ESvDxIcgsTxBQUQJjE754hpJrcOL6M9I3q77zIe3cfqa Ow6BFqXL3elSdiKy+Q== -----END CERTIFICATE-----Generated at Mon May 13 12:19:20 2024 by rpki-client on console-ams.rpki-client.org